CVE-2023-38849

moderate-risk

Published 2023-10-25

An issue in tire-sales Line v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET request.

Do I need to act?

0.35% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 7.5/10 High

NETWORK / LOW complexity

Line

Linecorp

Exploit https://github.com/syz913/CVE-reports/blob/main/CVE-2023-38849.md

Product https://liff.line.me/1657203739-yvGg5PjN

Exploit https://github.com/syz913/CVE-reports/blob/main/CVE-2023-38849.md

Product https://liff.line.me/1657203739-yvGg5PjN

/ 100

moderate-risk

Severity 26/34 · High

Exploitability 1/34 · Minimal

Exposure 5/34 · Minimal